Description
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked document records.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
documenso documenso
Default version status: unaffected
0 to < 2.13.0affected
pkg:github/documenso/documensoReferences
- https://github.com/documenso/documenso/commit/4f346d3c2d5264f221e4d787e162f16051e44114 ↗
- https://github.com/documenso/documenso/blob/v2.12.0/apps/remix/server/api/files/files.ts ↗
- https://github.com/documenso/documenso ↗
- https://www.vulncheck.com/advisories/documenso-before-2.13.0-unauthenticated-file-upload-via-api-files-upload-pdf ↗